Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa
File:                     029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa (raw, json)
Hash identifier:          tJ1NWxo4x78UEV6BMZT5gqTuiECL/pQCaRFLVCkNBdQ=
Subject key identifier:   34:D1:52:27:54:FA:7C:63:C4:2D:F0:13:99:CC:BD:35:BD:5C:8A:D1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801A3A0443355B8A501C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397234
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:3a:04:43:35:5b:8a:50:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4ab25ec7-2084-4cc3-b507-e8e25f3d7689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:59:82:ac:48:98:0a:9e:2d:5b:65:e1:bf:
                    9c:00:bb:55:96:a2:71:76:c1:58:a6:cc:77:b5:e1:
                    d6:57:75:cd:2b:e7:75:1e:49:08:34:2f:54:ed:70:
                    84:e0:cb:bf:0c:f7:30:f6:20:73:b9:82:dc:71:b3:
                    cb:ea:df:2f:62:e0:e8:46:f0:15:cc:c3:f1:92:30:
                    96:70:d0:8e:15:18:36:80:3e:d3:ed:e2:19:de:63:
                    ee:cb:6b:f4:13:73:61:a9:cc:3f:19:f6:b9:f3:f4:
                    ab:4f:17:7d:82:c5:26:d6:c7:30:58:b6:06:62:4a:
                    1b:ac:27:1a:44:78:ec:ff:07:8e:fb:7d:92:81:e7:
                    08:af:31:a9:ef:29:3e:3c:47:c8:85:4e:3e:c5:51:
                    34:a5:4a:f9:ab:39:7d:f8:84:97:be:cf:04:5f:b6:
                    21:3b:83:24:47:80:49:2c:53:20:81:2d:bc:5c:23:
                    60:32:9a:c5:68:3c:96:43:70:30:51:52:29:8a:84:
                    de:15:ce:78:93:95:7c:b3:92:3b:10:8b:7a:28:85:
                    d4:81:fe:6f:78:d7:58:92:1c:d7:8c:7c:4a:f4:c3:
                    f3:28:52:7d:36:60:d4:3b:82:de:39:d0:16:38:8a:
                    5c:0d:75:ce:0d:28:38:0d:1f:50:1c:5c:52:28:cf:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:52:27:54:FA:7C:63:C4:2D:F0:13:99:CC:BD:35:BD:5C:8A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:67:c8:f6:65:7f:e1:6c:57:5f:ba:20:cb:bf:9e:83:6c:
         47:44:8a:fb:8a:cc:49:98:c4:ca:06:30:8a:8e:40:15:0f:7b:
         fb:a9:a7:29:ef:82:af:ec:ed:31:5c:f4:16:6c:66:d9:7f:71:
         cb:f8:09:da:a6:31:5d:94:e4:ef:a5:bd:b7:bc:ec:ee:f9:2b:
         30:b8:2c:bd:27:6e:03:ae:99:7b:aa:ce:fd:96:92:b7:27:43:
         d9:56:7c:80:79:f5:94:6a:f5:a2:d0:29:ca:72:2f:ca:bb:9b:
         f8:17:1b:29:65:29:3d:ab:7d:88:01:0d:aa:e0:eb:98:28:73:
         31:58:ec:19:74:09:f7:77:4b:6c:12:33:96:d2:64:70:cc:0a:
         04:a6:13:0e:d1:61:72:12:e4:9b:f7:db:44:92:92:b8:76:81:
         74:d0:2d:7b:b8:5a:0d:4d:d3:1a:3d:f1:c1:a1:f6:8e:b2:d7:
         ae:e5:55:c0:b5:95:59:8a:40:8f:11:f1:01:03:2b:f0:09:ab:
         a6:4c:5f:e6:65:0d:cd:20:a8:d6:50:de:44:d1:8b:da:ae:6f:
         85:fe:c9:b8:fd:db:83:7e:1d:5b:35:a3:6a:b1:84:09:87:c5:
         d1:8f:82:21:db:f0:ba:98:b9:02:15:8b:4a:ff:02:78:70:3c:
         3c:87:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:06:47 2025 by rpki-client